Exterminate It! Antimalware

malpedia

Known threats:699,742 Last Update:October 27, 11:19

Testimonials

After scanning my computer many times using big name anti-virus and malware programs I still had several problems. Finally Exterminate It found multiple infections from NetSky. I sent Exterminate It a sample and the next day I received an e-mail instructing me to update and rescan. After following the instructions ZAP the worm/trojan was gone. My computer seems to be completly back to normal now. Good Job Exterminate It!

Melvin

File: DriverUpdate Startup.job

Location of DriverUpdate Startup.job and Associated Malware

Check whether DriverUpdate Startup.job is present in the following locations:

DriverUpdate Startup.job file locations that are Windows version independent:

  • C:\Windows\Tasks\DriverUpdate Startup.job

If you find DriverUpdate Startup.job file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The DriverUpdate Startup.job file is associated with malware only if found in the locations listed above.

Notes:

Different Variations of DriverUpdate Startup.job File^

File SizeFile Md5Last Seen
39230EB9BFF4DB34BAF243B2D8BC100906CJun 26, 2015
4327A586D6C6789180F7233970CE5632DE7Jun 29, 2015
41619155D3B3D272F8AAFF580BB2AD7512CJun 30, 2015
412EB0467DC0DE5BCA0C9EFE8E450DD135AJul 2, 2015
4200C15F460227B1C8D36CE3EB338212069Jul 2, 2015
3984F991AAA82AB3A1D536F01E31CFE7FD2Jul 23, 2015
4161717A09FCECA1F44DDBAF53898BD6429Jul 24, 2015
42090E23917C8FECD7E82DA956F9A55F92FJul 31, 2015
41853C0C428E8C703E63804B54D2D011301Aug 7, 2015
430592B8DC00BF5C9A8AD3AC02C6716438BAug 11, 2015
414F8FE88B50DF5B109294DAF20140970BFAug 21, 2015
4442FAF99C033F90DC1FCF0F54CA36B4FB4Aug 24, 2015
418CC8AF7161EFDE7587A30B91A2399F56AAug 30, 2015
41870C17625B461A3D3D07D74751D274AD6Sep 3, 2015
396546C344DCF43A0E97C4750CDD18C4BB2Sep 6, 2015
4208A4ED0129248ECD25AB5C7FC863473CASep 12, 2015
4425CA357C28DC8051FCF1E1BDF594BFE07Sep 12, 2015
416370D27F226DA1030AE9E9CBD49B8980CSep 20, 2015
4200FAE053E5E0B876C43F139EED0D454D5Sep 20, 2015
424247FFA10B784F0D0E0D9255EA9E857DCSep 22, 2015
4186AA2AD0A00302C5F84250DDECD642A95Sep 24, 2015
4483A126435B1DBC5C6860BF0BB775C7CACSep 27, 2015
436EF969C299E0C31529860FFBEBC7C5223Sep 30, 2015
42222A020115CC8F403E515D7F4CD7163A8Oct 2, 2015
4160EF65EE6480A5D45EC1609E0A0945814Oct 3, 2015
400DAF06C5FD56FEA4A2DE36EEEC66284F2Oct 5, 2015
4348FD657E07BBFA71AB993915AF9CEB69FOct 6, 2015
428EC01DF20EFBEDB4D2CB77CDAD8B3F893Oct 8, 2015
422E0193FC636B3AFAE24B53658606B33D3Oct 11, 2015
424664B02000F1934E48D46AAAC523430E7Oct 14, 2015
426BDE756EF41DC0A221BA6D9783723C00AOct 19, 2015
412A5658441586F93DD45038D7AC1E52747Oct 21, 2015
4386A6458FEB03B51051917ABD090A18E13Oct 22, 2015
418D459329F1915CB9D453C1680445912A5Oct 25, 2015
4146D7268D590FE0D412855983406811016Oct 29, 2015
4205AD2C5DD85B2D23DBAF4B7911EA43E86Nov 9, 2015
4207602E8932A8217B975A2B4E731A2A349Nov 11, 2015
42435752A4420D9EBC278077AFE9E46C409Nov 14, 2015
394A46EC17803569FC601A86826FBD60DA6Nov 20, 2015
4206A65394DD67685A5CBA7B37C381E3BC1Nov 22, 2015
444632780D4A2EF3F91C2EFE0B18FC43622Nov 24, 2015
418B4048ED6F7E42F7D30494F75B03FEA65Nov 29, 2015
394C9832831F67C9B2C6968DB30586EE274Dec 4, 2015
422C8E779140BAC7A7B01FBA7A20CFA2C00Dec 6, 2015
44600154D6997C1C7EFAFAD2EC0BF0B1029Dec 13, 2015
440C9336CD165C068D22C30074B41FE853CDec 16, 2015
438895B9450889FA2F4EAA656A77DDE838CDec 19, 2015
43292B23E6E1D1088A2656E275530A7EB25Dec 20, 2015
418E621AC63208E717FD6165EAC29C58459Dec 21, 2015
43498F2F95073DC3F2F86A14E5D79E451C1Dec 21, 2015
4548B662AD596ADEE44F79AF5E9864D6581Dec 28, 2015
424450673315AAD09CF366FEB4AC72385FCDec 28, 2015
440FF6269DE3BA0BFCD12F21EBAE8D0168BDec 29, 2015
45296E6FE5D9BF91C20ACE8305D11168DAADec 29, 2015
440FD223946BF9581D7D10E113C5DDBE76EDec 29, 2015
436EA9ACFA4FA85EE9A688F0DECB963EABADec 31, 2015
42011F32FEE62A3D0AF5327C13726E8AFB3Jan 2, 2016
4266A77320D6095016FFA0BEA0AF1C97860Jan 2, 2016
4321AC58C9348539A0833388DB69954AFC1Jan 2, 2016
4181F1B35F8BD2192D3B04B3B3095026D00Jan 6, 2016
436B5A94CCE0865353973ACB653C0E34912Jan 10, 2016
3948ACE23FE669168C0B0F59F1F64E0BFD9Jan 13, 2016
42283F6FB80C71B7288EB9DCF75684486BFJan 23, 2016
450C72E67BD8F40B7DE90E7A73FEA4BD132Jan 25, 2016
450A81AEE07DD910AB7A6C3470E8078CD07Jan 25, 2016
392F0AF6BA48359331986CAA7FD94A3DD38Feb 1, 2016
43681194BC52961459AEBF93AFDDD6D2F3CFeb 2, 2016
4225EB52F8E55F0B2960C2993EF1E794F00Feb 2, 2016
440FC02F07A71A010878A2EF7D803E8241BFeb 2, 2016
436EA8994F0D18812188D402B305C70F020Feb 2, 2016
416F857768080C71599D77C98A9D9AD9A97Feb 3, 2016
434D56BD79149F60D09E0B76EEB8C2BFAE4Feb 11, 2016
454EB301E525666D00A8624112527180C32Feb 12, 2016
41828677B77439E8B2071F517DE8EF21A96Feb 13, 2016
4165A7ABA35ACEE2B09CFF9A300AA812672Feb 14, 2016
418B4402F5D672B97B05E50EF0E2377E272Feb 16, 2016
452E1C2B345E8F9F466B10933C5D481240FFeb 18, 2016
43232E4691746874C928F2BE23E6F077B11Feb 23, 2016
414DB2B2C551F9A5456ECC16D991AF97500Mar 5, 2016
450F33FF41A850562262071899BAF13D9C1Mar 16, 2016
426C3684FF70574962AF98347CAF50CDEC6Mar 18, 2016
464BFC063C236EFC8BF303B0EFBCCE034D3Mar 20, 2016
464EDDC9D36B3D3132831AAF9E64EB3F546Mar 23, 2016
46495CD5B7409D0F9A3C09F6C73D5DD1714Mar 29, 2016
44094F26E941B0BC902961E14A24D48FFD1Apr 4, 2016
4205C22FF7E61FB2F99DEE4A47ACE7172C1Apr 8, 2016
43650707E8BBA48512BAB177EB2F22C6D05Apr 10, 2016
450254D5217F6427EF2955DD0C46CF0292EApr 14, 2016
394C4D1569F16CA4882983463E8B6124958Apr 15, 2016
400CFFB02E9F105150AE28CE12F7DD79F26Apr 19, 2016
43433A01E44486209300C214A7B31C3DCE3Apr 20, 2016
41856CD88D5FE17C414AFC038F994916581Apr 30, 2016
4520DE4B9729D5943BCA8934B58619A70D0Apr 30, 2016
436D38BFE78E5AE921AD9F025DAA0B11AB0Apr 30, 2016
418112D3B6DF993521C9055726D669CCDF2May 3, 2016
4204278DBF180C6A3E5FEEF2894CC026711May 8, 2016
44201DCF8D681E5687247CB13DB7AA11AD6May 9, 2016
47477DB17C801B06D732FA699D9B2C40FB9May 11, 2016
428161461257C6446E5EB411AF3FA576F22May 13, 2016
430138D1DB0E2DEAF2D1D4EA92C96F731C0May 13, 2016
432C6BD95521218BC208847180D4C452B09May 15, 2016
432A16D0D87BDB961C939B3E8DB5939A98AMay 16, 2016
464F061B0F4D8C1CB958533065E3389AF5BMay 17, 2016
41856FFD0884137BB60F9BD27DBDFC0AA6DMay 17, 2016
44090C65CBCBA0B07BDF59569C7FC7759DAMay 17, 2016
4602AB89F054CFAAA09E75904215C9A4C42May 18, 2016
42856BF80A1A88FCF9CA2E9E4D82D54A252May 20, 2016
414231DF591A496549553D5DDD58267E6AAMay 20, 2016
4501347DC315690CCDE56D31552343B5D5CMay 21, 2016
4401906D60F6311AA51273341B11E06EFE2May 21, 2016
4165BE20E4B9F263C21002FB4906325515DMay 23, 2016
394A094C1E473909E7FDE4BBC355A4912A9May 25, 2016
3989E2A9495C934EC76A63C56E09A1AAAF1May 26, 2016
42263914F608168E61A94233914B977806FMay 26, 2016
392726FF1A14827ECA2F3244C92AE03EB88May 30, 2016
442AA6980724C1F6302070553E163040C78May 30, 2016
436DBED406EA8B323650BE3F4DEE7EF4B17May 30, 2016
420CDCFDA1070E5175F9A5BA5AD5FBB1FFFJun 3, 2016
436B9B633431690115D4431318ED588489FJun 4, 2016
4403C095F0FAAAC6ABE01948A2DAA3DBDDBJun 4, 2016
416748392178B88525173C00B67BA355FF7Jun 6, 2016
422FD40A0BFE202EC6E50FC52AD3D036AC2Jun 8, 2016
394CDDC8276CA6EA5E84FAB3C993C30D3CBJun 8, 2016
4329616A9AC2A2E367E393AF0411EB8343DJun 14, 2016
43686554EFDB45FEA17D9910CBFB4420159Jun 15, 2016
4683999149FF87AC2A1C28994F5EB2EA720Jul 21, 2016
418A49853B1B9AD84A8D9F029A435EFC02DJul 25, 2016
4124A004DB3C40FF68A7B90CFC1F120097AJul 27, 2016
4187F8FA1D13DA01A083068709C718844A1Aug 9, 2016
41611BABA01C4ABBB991970AA748876DB4FAug 13, 2016
4505086D5145F6A04D9E1AC5700366B8478Sep 7, 2016
418D6DAD8B08D9B4988FFA6C1F81039A5F0Sep 12, 2016
450185C553830D7247DA832C91277F34680Sep 24, 2016
4128D250810ADA2694BEF31EC9713B09B96Oct 24, 2016
3949B22205D913A413994FD873288E7E918Nov 1, 2016
4322C36C93BFA9F6577FB3AD421D07AE0CENov 2, 2016
4183BC9F9DEB7449E3D78A53E00F58A9E1ANov 8, 2016
42660962092EF18E69B57C88CEC38BCA34CNov 9, 2016
4308D5650CCE8BA459C7F392D0CBAA8632ANov 9, 2016
41610B146AF62C472BF4350B00756C56C75Nov 13, 2016
4363F8ECC957E20F672FF868FFFA2FC500FNov 15, 2016
4508130E5587FFAB4E360896EA0C68DA5AENov 17, 2016
432C707E9A7BE87201C02336B2D0558A148Nov 20, 2016
442736BCD4C63C9155B730780D62C25E063Nov 22, 2016
4106CB060841F68526B33266280BB470A40Dec 1, 2016
39263F86B51A13F9C2EBB13D7D55054A025Dec 1, 2016
43451F0356736A9C1B16D24DB35CD379B82Dec 6, 2016
466510893136525F7DB23C569869EC7972EDec 8, 2016
392533A18FBCD9A5980F45E610FD4EE5514Dec 11, 2016
462349CB94D1A3A3549C434C27B0DE53FC6Dec 13, 2016
406392B1FB42DEDF94C3860AC47693DEF04Dec 15, 2016
43259F4E1707F4A05FE9CCEBF2202E887C9Dec 19, 2016
4500ECD1769DF4F8D30BEC79BB79DE0E19EDec 19, 2016
416F7B44324610ECB0395FCB42266B64B97Dec 20, 2016
430BE8577E93049CA1B4EB98865682A0573Dec 21, 2016
454F8D2771576A9593B4D72F0FDCAB5E49ADec 22, 2016
4425A1851B512DEC6A8647611EF19A32BF2Jan 15, 2017
428FE84E7F5D1904BF651FF8B1BB38F73ABJan 24, 2017
4145B17426CC21F4B29C91DF4659991175AJan 27, 2017
446299F45836E2F9B0CEAAB86CB9F205902Feb 5, 2017
4362EAB4A70557B316F4A135B4A9DE081DBFeb 9, 2017
424B8F161814EC6AA6BE5491790F61ED489Feb 23, 2017
466B0990546AD4879BE3A27BFB3547AD6B1Mar 2, 2017
42034B4C4D706BE844DFEAF19C5C2E4B14DMar 2, 2017
4285D9F4AD33497F922DE19459289274794Apr 12, 2017
452B5AC8543A0ED4415C6F75F7685405446Apr 30, 2017
42404DA63628F37E715C63547F7AF60A79AMay 4, 2017
392E8ADED5148E91981F8549EABED57505CMay 7, 2017
432D356425C750ED32DC5A524D44B38F546May 12, 2017
432664F8A037E74ABDEAFFCB95130D81BB5May 12, 2017
3945F71BF0EA310F1D4E370BBD0F5D9F7AFMay 16, 2017
422DBB306362587A9EE4E74F55DCD7B41F0May 22, 2017
43814B7D8FDC0BD33A38C256319C2FC79F7May 23, 2017
452A07C2919DE54196EEF171702E8E90681Jun 7, 2017
410796C316931A346E775211BAFBF2DB5BCJun 7, 2017
396CB94B684DCB7F3AC5C94B397DBADB9FAJun 23, 2017

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove DriverUpdate Startup.job^

  1. To enable deleting the DriverUpdate Startup.job file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select DriverUpdate Startup.job and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of DriverUpdate Startup.job and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of DriverUpdate Startup.job and Associated Malware.
  6. Notes:

    • The deletion of DriverUpdate Startup.job will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of DriverUpdate Startup.job will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a DriverUpdate Startup.job malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type DriverUpdate Startup.job. The name of the first found registry value referencing DriverUpdate Startup.job is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to DriverUpdate Startup.job, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of DriverUpdate Startup.job and Associated Malware.